CVE-2026-86790 | Highlight Box Plugin up to 1.0 on WordPress shortcode cross site scripting

September 12, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in Highlight Box Plugin up to 1.0 on WordPress. Affected is an unknown function of the component shortcode Handler. The manipulation leads to cross site scripting.

This vulnerability is documented as CVE-2026-86790. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More